CVE-2017-11401
CriticalSummary
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before version 03.2.00 related to improper handling of the mbap.length field in ModBus packets. This allows an attacker to send malformed packets to a protected asset, bypassing function code filtering.
Risk Assessment
An attacker could exploit this vulnerability to send malicious packets, potentially leading to unauthorized access to protected resources and system damage.
Recommendation
It is recommended to update the device to version 03.2.00 or later to mitigate this vulnerability.
Original NVD description (English source)
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.